xcode-janitor-mcp

The server's primary functions involve reading and deleting files within a specified Xcode project directory. File deletion (`removeItem`) is performed on paths derived from parsed `.xcassets` within the `project_path` supplied by the user. Critical safety features like `dry_run` and automatic `create_backup` are implemented. There are no obvious code injection vectors via `eval` or direct `shell_exec` on user input. Paths are primarily handled by `FileManager` and `URL` objects. The use of `StdioTransport` limits network attack surfaces. Reading potentially sensitive files within the `project_path` is inherent to its purpose.